Marinealver 8,073 Posted May 4, 2019 So just tried to browse a book mark on this forum and got blocked by Google Chrome stating that this website has been compromised. I tried again on other browsers Microsoft Edge, Firefox and get various Certificate Errors and other notices that prompt me to leave. Quote Share this post Link to post Share on other sites
Fnordly 0 Posted May 5, 2019 The SSL cert has expired at the end of May 4th, and just needs to be renewed. No idea how to raise the alarm for their admins to address though. Quote Share this post Link to post Share on other sites
Lord Ashram 988 Posted May 5, 2019 Yeah, this is happening to everyone. Quote Share this post Link to post Share on other sites
Psymia 40 Posted May 5, 2019 (edited) FFG hasn't been compromised. However the certificate for community.fantasyflightgames.com expired on Saturday, May 4, 2019 at 2:00:00 PM GMT+2. It will probably be fixed tomorrow after the weekend once people are at work again Edited May 5, 2019 by Psymia Quote Share this post Link to post Share on other sites
Marinealver 8,073 Posted May 6, 2019 Well I still get it, so did they forget to pay their taxes to Microsoft/Google? How does an expire certificate cause a security vulnerability? Quote Share this post Link to post Share on other sites
Psymia 40 Posted May 7, 2019 Well they haven't renewed the certificate yet. Microsoft/Google is not involved in this process. FFG seems to gets their certificates from Amazon, which in turn gets their intermediate CAs from the Starfield Services Root CA. It doesn't cause a security vulnerability. You browser simply warns you that the page you're visiting may not be provided by the server which claims to be FFG. 1 CaptainJaguarShark reacted to this Quote Share this post Link to post Share on other sites
CaptainJaguarShark 2,050 Posted May 7, 2019 16 hours ago, Marinealver said: Well I still get it, so did they forget to pay their taxes to Microsoft/Google? How does an expire certificate cause a security vulnerability? Valid certificates are a proof of trust that the owners of the site you are visiting are who they say they are. An expired certificate in itself is not itself a vulnerability but can suggest that a vulnerability exists. At the very least, probably good to not communicate sensitive information, personal information, etc, through a site with a bad cert. I wouldn't suggest sending that kind of info through a fan-forum anyway, though. 1 Marinealver reacted to this Quote Share this post Link to post Share on other sites
Marinealver 8,073 Posted May 7, 2019 Well I stopped getting those warnings so looks like they fixed their certificate. 1 CaptainJaguarShark reacted to this Quote Share this post Link to post Share on other sites
CaptainJaguarShark 2,050 Posted May 7, 2019 55 minutes ago, Marinealver said: Well I stopped getting those warnings so looks like they fixed their certificate. Yep. But we'll see this again next June. 1 Marinealver reacted to this Quote Share this post Link to post Share on other sites
